Senior Security Engineer – Security Engineering & Third-Party Security

Full-time contract | Remote, India | ₹18–24 lakh per year

Join Symosis Security, a growing cybersecurity firm serving US enterprise and public-sector clients.

- Schedule: Monday–Friday, 9 AM–6 PM US Eastern Time, following US daylight saving changes.
- Compensation: Annual contract fee of ₹18–24 lakh, paid monthly.
- Time off: 10 working days of paid time off annually.
- Arrangement: Independent contractor engaged directly by Symosis Security LLC, US. No company-sponsored health insurance or employee benefits.

About Symosis Security

Symosis Security is a Silicon Valley cybersecurity consulting and engineering firm with delivery teams in the US and India. We help enterprise and public-sector clients assess risk, test defenses, and implement security improvements across applications, cloud platforms, identity, and AI systems.

We’re looking for a hands-on senior security engineer who can assess technical risk, review architectures, evaluate third-party security, implement controls, and build automation. You’ll own work from identifying weaknesses through implementing and validating improvements.

What you’ll do

- Technical risk assessments: Evaluate threats, vulnerabilities, control effectiveness, and business impact. Document evidence-based findings and prioritized remediation.
- Security architecture reviews: Review application, cloud, SaaS, and identity architectures, including data flows, trust boundaries, authentication, authorization, integrations, and sensitive data handling.
- Third-party security assessments: Assess vendors and service providers through technical walkthroughs,



architecture reviews, SOC 2 reports, penetration testing results, questionnaires, and supporting evidence. Validate gaps and track remediation.
- Security engineering: Configure, harden, integrate, and troubleshoot security controls. Implement approved fixes and test their effectiveness.
- Coding and automation: Build scripts, API integrations, and workflows for evidence collection, configuration validation, security monitoring, remediation, and reporting.
- Delivery ownership: Produce transparent technical documentation, communicate findings directly to client teams, and drive assigned work through verified closure.

Essential qualifications

- 6+ years of relevant hands-on cybersecurity experience.
- Experience independently delivering technical risk assessments and security architecture reviews.
- Experience conducting third-party security assessments and validating vendor security claims.
- Strong technical depth in at least one area: cloud security, IAM, SaaS security, endpoint security, or application security.
- Demonstrated ability to implement and troubleshoot security controls—not solely recommend improvements.
- Practical coding experience with Python, PowerShell, or a comparable language, including REST APIs, debugging, and security automation.
- Working knowledge of NIST,



ISO 27001, SOC 2, or CIS Controls and translating requirements into technical controls.
- Strong written English and ability to lead technical discussions with US client teams.
- Located in India and available to work the stated US Eastern Time schedule.

Preferred qualifications

- Microsoft Entra ID, Azure, Microsoft 365, AWS, or SaaS security engineering experience.
- Threat modeling, application security, DevSecOps, or infrastructure as code.
- Experience using Claude, Codex, GitHub Copilot, or similar tools to build automation, including reviewing, debugging, and validating generated code.
- AI security assessments or security reviews of AI-enabled applications.
- Relevant certifications such as CISSP, CCSP, CISA, CRISC, or cloud security certifications.

Engagement and compensation

- Annual contract fee of ₹18–26 lakh, paid monthly.
- 10 working days of paid time off annually.
- Independent contractor engagement directly with Symosis Security LLC, US.
- No company-sponsored health insurance or employee benefits.

How to apply Apply through LinkedIn and email [email protected] with:

- Résumé, certifications, notice period, and expected annual contract fee.
- A brief example of a technical risk assessment, architecture review, or third-party assessment you personally delivered.
- An example of a security control you implemented and how you verified the outcome.
- An automation you built: the problem, technologies used, and results.
- A sanitized or self-created technical finding, assessment, or code sample. Do not share confidential client information.

📌 Senior Security Engineer – Security Engineering & Third-Party Security (India)
🏢 Symosis Security
📍 India